2026-07-06 · 2026-Q3
OpenAI Codex Desktop Zero-Click Data Exfiltration (CVE-2026-14898)
PrimaryL2InstructionSecondaryL8Output / Destination
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- No
- Actor:
- Attacker
Target
OpenAI Codex desktop app for macOS before 26.527.31326
Impact
The app renders remote Markdown images returned by the model, so an indirect prompt injection can make the model build a remote image URL containing sensitive data that is fetched automatically with no user click, leaking it to an attacker server
Root Cause
Auto-fetching remote images from untrusted model output (CWE-200), the same image-based exfiltration pattern seen in other assistants